$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer File: 636964CD271D2009F5B6D34255EB744F3791245D.cer (raw, json) Hash identifier: zzih7rxMEbr9vnUQ7ZDdAfsonKH2slMJtwFeQJgqGp4= Subject key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 69E172C12A4EAA50CBB04C3EE92A04D887AAF5BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:48:09 +0000 Certificate not after: Sun 02 May 2027 00:53:09 +0000 Subordinate resources: IP: 103.143.24.0/23 IP: 2001:df1:6880::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e1:72:c1:2a:4e:aa:50:cb:b0:4c:3e:e9:2a:04:d8:87:aa:f5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:48:09 2026 GMT Not After : May 2 00:53:09 2027 GMT Subject: CN=636964CD271D2009F5B6D34255EB744F3791245D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:b0:a2:23:a5:06:51:37:10:8b:e6:1e:ab: ed:06:c3:fa:43:07:e7:44:d4:97:fc:c6:7f:8e:04: f7:39:11:03:f1:d3:33:37:57:f5:69:c0:cf:de:df: 10:6f:66:0f:d3:ac:e1:eb:c8:2c:6b:23:ad:89:ff: 2e:cf:e4:15:3c:3c:64:1c:d9:6a:0d:a8:70:ff:5c: 14:0b:6f:2c:0d:4d:84:0a:3a:6a:12:16:14:ab:6e: fe:80:0c:f7:1e:ab:2a:59:b8:e5:9f:46:d1:5c:7a: c5:38:cb:52:ff:41:80:16:25:48:26:aa:63:62:91: 00:8f:1d:3b:cd:36:22:33:3e:1e:bd:16:63:aa:da: fb:dd:ae:38:15:67:31:7e:c8:3f:23:61:2a:59:80: 1d:8b:29:a4:9d:6e:12:d3:ae:26:26:ec:c9:62:4d: 3f:f1:69:f7:e1:39:09:76:73:7d:5c:9b:8e:32:70: 15:25:31:8b:9d:af:6b:ce:2c:16:04:ac:7f:5b:ad: 00:99:2f:7d:e5:e4:7a:31:6a:02:7b:ae:c3:61:12: 56:5e:b6:72:13:ea:a9:2d:7b:29:28:a0:12:0b:5f: 64:9c:37:c5:41:22:1e:e8:76:9a:a2:4a:4c:e8:93: 3c:d4:0f:9d:26:d4:a8:d9:71:e6:6a:9a:87:e0:7c: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.24.0/23 IPv6: 2001:df1:6880::/48 Signature Algorithm: sha256WithRSAEncryption 90:b6:d9:ea:e3:2c:d3:6b:25:59:28:13:64:11:31:0e:c7:fb: 70:36:46:47:dc:57:d8:44:9c:66:d0:93:18:03:77:51:db:59: bb:f1:38:e1:f4:d6:51:cd:ed:0c:38:e4:4f:a7:59:ca:f2:a8: 2b:a7:86:1b:17:1b:a1:a4:c2:db:01:e3:92:24:66:dd:54:4b: e5:03:af:ca:63:d6:9a:df:cb:8f:b4:cd:f0:c8:f1:03:9b:53: d4:2d:bb:fa:c0:50:72:12:87:2d:19:44:5e:23:71:97:6f:46: d6:94:95:e5:49:04:38:e3:42:37:38:e6:3d:8b:7a:77:a7:24: 3f:26:0b:5b:be:68:66:c6:c7:a0:ee:12:55:35:7e:fe:d9:17: 9d:77:1d:fb:b5:60:10:04:f5:74:46:e2:6c:1d:f3:1f:f0:03: bf:40:cb:05:9c:5f:1c:a5:3f:df:25:b2:4a:16:e0:34:6b:1f: 15:e9:19:be:e4:95:91:27:9b:49:c6:a1:d3:4c:9c:a4:1e:d4: cd:96:bd:6f:d5:e6:25:c2:90:e2:5e:e3:19:8a:ff:5d:69:72: cc:05:d3:78:59:d2:10:50:18:26:80:b4:fd:72:fd:f0:bc:b8: e3:80:77:5a:6d:bc:9b:41:88:b7:29:58:8b:c7:83:03:9a:26: 91:16:d2:50 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUaeFywSpOqlDLsEw+6SoE2Ieq9b4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDgwOVoX DTI3MDUwMjAwNTMwOVowMzExMC8GA1UEAxMoNjM2OTY0Q0QyNzFEMjAwOUY1QjZE MzQyNTVFQjc0NEYzNzkxMjQ1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2WsKIjpQZRNxCL5h6r7QbD+kMH50TUl/zGf44E9zkRA/HTMzdX9WnAz97f EG9mD9Os4evILGsjrYn/Ls/kFTw8ZBzZag2ocP9cFAtvLA1NhAo6ahIWFKtu/oAM 9x6rKlm45Z9G0Vx6xTjLUv9BgBYlSCaqY2KRAI8dO802IjM+Hr0WY6ra+92uOBVn MX7IPyNhKlmAHYsppJ1uEtOuJibsyWJNP/Fp9+E5CXZzfVybjjJwFSUxi52va84s FgSsf1utAJkvfeXkejFqAnuuw2ESVl62chPqqS17KSigEgtfZJw3xUEiHuh2mqJK TOiTPNQPnSbUqNlx5mqah+B8sJkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGNpZM0nHSAJ9bbTQlXrdE83kSRdMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY1YzQwMGQxLTliYmQtNGUyYi04ZDU4LTZmNzQ5ZGJjMzkyZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NWM0MDBk MS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC82MzY5NjRDRDI3MUQyMDA5 RjVCNkQzNDI1NUVCNzQ0RjM3OTEyNDVELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ48YMA8EAgACMAkDBwAgAQ3xaIAwDQYJKoZIhvcNAQELBQADggEBAJC22erj LNNrJVkoE2QRMQ7H+3A2RkfcV9hEnGbQkxgDd1HbWbvxOOH01lHN7Qw45E+nWcry qCunhhsXG6GkwtsB45IkZt1US+UDr8pj1prfy4+0zfDI8QObU9Qtu/rAUHIShy0Z RF4jcZdvRtaUleVJBDjjQjc45j2LenenJD8mC1u+aGbGx6DuElU1fv7ZF513Hfu1 YBAE9XRG4mwd8x/wA79AywWcXxylP98lskoW4DRrHxXpGb7klZEnm0nGodNMnKQe 1M2WvW/V5iXCkOJe4xmK/11pcswF03hZ0hBQGCaAtP1y/fC8uOOAd1ptvJtBiLcp WIvHgwOaJpEW0lA= -----END CERTIFICATE-----Generated at Tue May 12 22:52:40 2026 by rpki-client